General

  • Target

    JaffaCakes118_176eeeee29dca17735e4d3e1e87d4b31484f06cd5f66929add56ac0444770aba

  • Size

    184KB

  • Sample

    241223-q9a9ma1ng1

  • MD5

    3c1068de705ced829dba09422bf0bf0f

  • SHA1

    532dd5a7d07a321ea859b785b2a00c248aeda0b4

  • SHA256

    176eeeee29dca17735e4d3e1e87d4b31484f06cd5f66929add56ac0444770aba

  • SHA512

    7d9b1871ce40e847b9e3b819f0e7288af6c4456a402fff13b18b8c4ce21a392fa19edb40b7f7b58b62a165c801457e569dec8738a54aa3ab0be8b7eaf7aa7209

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_176eeeee29dca17735e4d3e1e87d4b31484f06cd5f66929add56ac0444770aba

    • Size

      184KB

    • MD5

      3c1068de705ced829dba09422bf0bf0f

    • SHA1

      532dd5a7d07a321ea859b785b2a00c248aeda0b4

    • SHA256

      176eeeee29dca17735e4d3e1e87d4b31484f06cd5f66929add56ac0444770aba

    • SHA512

      7d9b1871ce40e847b9e3b819f0e7288af6c4456a402fff13b18b8c4ce21a392fa19edb40b7f7b58b62a165c801457e569dec8738a54aa3ab0be8b7eaf7aa7209

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks